messages exposing the full user obejct